Privacy Policy
Effective: April 2026
1. Information We Collect
We collect information you provide when creating an account (name, email, business name), data you enter into the platform (bookings, guest information, financial records), and standard usage analytics (page views, feature usage). We do not sell your data to third parties.
2. How We Use Your Data
Your data is used to provide the VillaOS service, including booking management, guest communication, financial tracking, and AI-powered insights. AI features process aggregated, anonymized data — guest PII is stripped before any AI provider interaction.
3. Data Security
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). We use Supabase PostgreSQL with Row Level Security policies ensuring strict tenant isolation. Integration credentials are stored encrypted and never exposed to client code.
4. GDPR Compliance
VillaOS is GDPR compliant. You can export all your data at any time (JSON format), request full deletion of your account and all associated data, and we maintain an audit trail of all data processing activities. Contact us at privacy@villaos.app for data requests.
5. Third-Party Services
We use Supabase (database and authentication), Vercel (hosting and analytics), and optionally Anthropic or OpenAI (AI features, with PII stripped). We integrate with booking channels (Airbnb, Booking.com, etc.) only at your request via iCal feeds.
6. Contact
For privacy questions, contact us at privacy@villaos.app.